Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          P7grznPW0hehKolCOwOh0Z0jijs/xp3dfsCRWX0aVTU=
Subject key identifier:   5C:F0:60:6E:86:7E:90:94:17:D0:F9:56:ED:B2:5D:3C:2D:49:D5:80
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          074C
Signing time:             Sun 15 Jun 2025 00:15:37 +0000
Manifest this update:     Sun 15 Jun 2025 00:15:36 +0000
Manifest next update:     Sun 22 Jun 2025 00:15:36 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: 4tUboIT69yt1Df5SIj5zSZPUo8smbypwCetbMRTqLEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Jun 15 00:15:36 2025 GMT
            Not After : Jun 22 00:15:36 2025 GMT
        Subject: CN=684e10a9-3e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:a0:3c:72:44:3d:88:5c:ea:7b:44:1f:40:
                    53:9b:65:e8:8b:bb:5d:1e:8e:fe:50:ee:e7:f2:e0:
                    e0:13:94:3f:86:e5:f9:ca:4f:a4:d2:87:1c:cf:87:
                    06:79:7a:bc:6a:32:ed:1e:52:07:11:47:10:b7:78:
                    21:66:0d:c1:92:e7:64:44:76:6f:73:54:19:a9:b4:
                    d7:77:38:b3:3b:4f:ad:04:37:e2:10:c4:93:6d:e8:
                    e6:87:19:90:25:dd:a1:f9:61:fe:35:c5:04:d8:2c:
                    78:5f:14:80:54:cc:4e:78:3d:36:a4:dc:75:49:53:
                    7c:27:bb:f1:6e:68:dc:5d:db:93:37:c3:db:06:8e:
                    02:35:08:f5:8d:3b:b4:d4:44:61:51:f9:aa:ed:75:
                    59:47:78:cb:cd:44:9d:df:1f:98:72:f8:d5:a2:15:
                    72:09:69:f1:20:84:6d:b4:d7:6f:4b:7c:81:31:64:
                    1f:e5:1a:4e:f1:ae:48:dc:c1:ac:4d:22:ac:d4:53:
                    26:03:ef:d4:5d:81:64:26:51:c3:5e:26:e1:3a:84:
                    d0:5f:bc:4f:34:f0:93:3c:e8:1a:8f:eb:91:85:3e:
                    09:7f:f7:ca:2d:f5:08:da:c9:58:5c:ac:35:f6:38:
                    0f:e4:8a:7c:e4:da:ef:3c:63:70:5c:fa:5f:d4:a7:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F0:60:6E:86:7E:90:94:17:D0:F9:56:ED:B2:5D:3C:2D:49:D5:80
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:20:a9:2a:14:eb:33:1c:59:5c:59:1d:8f:24:a6:ab:99:40:
         b0:6b:cc:ec:8b:26:d6:7f:4f:70:79:88:5c:e0:2b:75:72:ed:
         9e:3b:30:bc:4c:d2:64:b7:44:6d:2e:c0:ed:f8:d5:b7:91:5f:
         8d:db:eb:c5:21:bb:60:5d:a8:c8:e1:32:5a:5e:33:15:56:02:
         3d:63:88:d5:36:db:fb:75:f0:fa:0c:31:8d:45:a9:44:22:0f:
         88:23:fa:f6:bb:7c:84:ac:40:cb:07:3b:27:b1:4c:70:8d:0c:
         87:b4:fc:de:69:3f:57:bb:16:88:b8:0e:57:1e:c0:a0:d6:d8:
         15:df:10:73:3e:2b:ee:ee:78:ff:87:64:24:06:66:57:3f:ac:
         8b:6c:eb:06:78:86:e7:bf:bd:ba:8a:bd:df:aa:38:23:55:d9:
         bb:cc:99:d6:8e:eb:80:42:6e:0e:4d:3a:55:4c:a1:7c:54:12:
         2c:e9:cd:02:7e:ca:82:d1:d1:cf:0f:dc:63:6d:49:54:f9:70:
         52:7d:1a:bc:6e:90:f8:39:7d:c7:ef:91:82:05:d0:c7:34:cb:
         04:0f:8a:d7:1b:a9:49:c1:8a:1c:c9:2b:a1:c4:fd:3e:82:b5:
         c6:3b:52:e6:e0:9e:6e:f5:17:1b:65:ac:fc:52:09:1c:c1:74:
         8e:98:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:09:33 2025 by rpki-client